Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1251633 > unrolled thread

Bug#1108642: chromium: potentially serious security bug

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1108642: chromium: potentially serious security bug Fourhundred Thecat <400thecat@ik.me> - 2025-07-02 09:30 +0200

#1251633 — Bug#1108642: chromium: potentially serious security bug

Package: chromium
Version: 138.0.7204.49-1~deb12u1

I am experiencing very weird and suspicious issue on debian 12.

For context, I am using grsecurity + RBAC, which gives me the 
possibility to see what files each program wants to access. My issue is 
not caused by RBAC. but RBAC brought my attention to this issue.

SO, I have upgraded chromium browser to: 138.0.7204.49

and suddenly when chromium starts, in addition to trying to access the 
usual files in my home, such as ~/.config/chromium or ~/.cache , it now 
tries to access sensitive folders on my system:

~/.ssh/
~/.gnupg/
~/.dbus/
/boot/

(while ~/.dbus is not as immediately alarming as the others, Chromium 
accessing this when it didn't before is still a change in behavior that 
deserves scrutiny)

this never happened before. I am sure, because the RBAC rules that I am 
using would have alerted me.

this is highly suspicious and potentially a serious security issue !

[toc] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web